{"metadata": {"vulnerability": "CVE-2026-87855", "count": 20, "kinds": {"milestone": 4, "sighting": 6, "kev": 0, "other": 10}}, "data": [{"timestamp": "2026-08-18T00:00:00Z", "date_only": false, "value": "2026-08-18T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-87855", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2026-09-09T13:01:59.564Z", "date_only": false, "value": "2026-09-09T13:01:59.564Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-87855", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-13T15:18:21Z", "date_only": false, "value": "2026-10-13T15:18:21.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-87855", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2026-10-14T03:40:06.730Z", "date_only": false, "value": "2026-10-14T03:40:06.730Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-87855", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-14T03:40:06.730Z", "date_only": false, "value": "2026-10-14T03:40:06.730Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-87855", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T04:03:17.553Z", "date_only": false, "value": "2026-10-14T04:03:17.553463Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/suriq.io/post/3mxso3gmaga2w", "record": "CVE-2026-87855", "field": "creation_timestamp", "uuid": "40e78605-af35-4eee-bb6e-882e18485c6e", "content": "CVE-2026-87855 and CVE-2026-78193 affect the JTL-Connector for WooCommerce WordPress plugin (ntbyk), all versions up to 2.4.3: an unauthenticated file upload enabling remote code execution, and an unauthenticated SQL injection. No fixed version is listed.", "url": "https://bsky.app/profile/suriq.io/post/3mxso3gmaga2w"}, {"timestamp": "2026-10-14T04:18:52Z", "date_only": false, "value": "2026-10-14T04:18:52Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-7MJR-PHQX-8HGQ", "record": "GHSA-7MJR-PHQX-8HGQ", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-14T04:18:52.840Z", "date_only": false, "value": "2026-10-14T04:18:52.840", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-87855", "record": "FKIE_CVE-2026-87855", "field": "published"}, {"timestamp": "2026-10-14T04:30:26.093Z", "date_only": false, "value": "2026-10-14T04:30:26.093277Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/117437381044125629", "record": "cve-2026-87855", "field": "creation_timestamp", "uuid": "66b14cca-4ea7-4e30-8cd7-9146e1d4796f", "content": "CVE-2026-87855: CRITICAL RCE in ntbyk JTL-Connector for WooCommerce (<=2.4.3). Unauthenticated file upload due to weak auth & validation. Restrict/disable plugin while awaiting patch. https://radar.offseq.com/threat/cve-2026-87855-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-ntbyk-jtl-connector-for-8335c9f626fb9c36 #OffSeq #WordPress #Security #CVE202687855", "url": "https://infosec.exchange/users/offseq/statuses/117437381044125629"}, {"timestamp": "2026-10-14T04:30:28.097Z", "date_only": false, "value": "2026-10-14T04:30:28.097475Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mxsplyxjhr2y", "record": "cve-2026-87855", "field": "creation_timestamp", "uuid": "dc03a069-98c0-4fc0-9ad5-26e8aebb1da7", "content": "CRITICAL: ntbyk JTL-Connector for WooCommerce <=2.4.3 lets unauthenticated attackers upload files & execute code. Restrict or remove plugin until patched. https://radar.offseq.com/threat/cve-2026-87855-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-ntbyk-jtl-connector-for-8335c9f626fb...", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mxsplyxjhr2y"}, {"timestamp": "2026-10-14T06:07:45.373Z", "date_only": false, "value": "2026-10-14T06:07:45.373419Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxsuzuw2wn2w", "record": "CVE-2026-87855", "field": "creation_timestamp", "uuid": "88bdc352-4c59-4969-a56c-6e215d2c7298", "content": "\ud83d\udea8 CVE-2026-87855 \u2014 CVSS 9.8 CRITICAL\n\nThe JTL-Connector for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Upload in all versio...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-87855\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mxsuzuw2wn2w"}, {"timestamp": "2026-10-14T06:31:13Z", "date_only": false, "value": "2026-10-14T06:31:13Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-7MJR-PHQX-8HGQ", "record": "GHSA-7MJR-PHQX-8HGQ", "field": "published"}, {"timestamp": "2026-10-14T06:31:13Z", "date_only": false, "value": "2026-10-14T06:31:13Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-7MJR-PHQX-8HGQ", "record": "GHSA-7MJR-PHQX-8HGQ", "field": "modified"}, {"timestamp": "2026-10-14T08:40:04.795Z", "date_only": false, "value": "2026-10-14T08:40:04.795774Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxt5kdu2ku2z", "record": "CVE-2026-87855", "field": "creation_timestamp", "uuid": "271545b5-4c91-4c83-b98d-242a61e5b969", "content": "CVE-2026-87855 - jtl-connector for woocommerce\nThe JTL\u2011Connector for WooCommerce plugin lets anyone upload files to the server, even without logging in. Because the uploaded files are not properly checked, an attacker\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ntbyk #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxt5kdu2ku2z"}, {"timestamp": "2026-10-14T14:21:04.314Z", "date_only": false, "value": "2026-10-14T14:21:04.314600Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-87855", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-14T14:21:04.314Z", "date_only": false, "value": "2026-10-14T14:21:04.314600Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-87855", "record": "FKIE_CVE-2026-87855", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-14T14:21:17.303Z", "date_only": false, "value": "2026-10-14T14:21:17.303Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-87855", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-14T14:21:17.303Z", "date_only": false, "value": "2026-10-14T14:21:17.303Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-87855", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T15:17:26.197Z", "date_only": false, "value": "2026-10-14T15:17:26.197", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-87855", "record": "FKIE_CVE-2026-87855", "field": "lastModified"}, {"timestamp": "2026-10-14T16:34:59.939Z", "date_only": false, "value": "2026-10-14T16:34:59.939912Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117440230162024745", "record": "CVE-2026-87855", "field": "creation_timestamp", "uuid": "748d058c-25b5-4998-a4c7-8e6b5615e3f2", "content": "CVE-2026-87855 JTL-Connector for WooCommerce <= 2.4.3 - Unauthenticated Arbitrary File Upload via 'image.push' Method The JTL-Connector for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.4.3 via the saveImage() function. This is due to the startSession() function accepting an empty jtlauth parameter as a valid credential, combined with insufficient file type validation in handleImagePush(). This makes it possible for unauthenticated attackers to upload files that may be executable, which makes remote code execution possible.\nhttps://www.cve.org/CVERecord?id=CVE-2026-87855https://www.wordfence.com/threat-intel/vulnerabilities/id/ed869c1e-ae54-4db2-8147-39050a034c5e?source=cvehttps://plugins.trac.wordpress.org/browser/woo-jtl-connector/tags/2.4.3/vendor/jtl/connector/src/Application/Application.php#L885https://plugins.trac.wordpress.org/browser/woo-jtl-connector/tags/2.4.3/src/Controllers/ImageController.php#L632https://plugins.trac.wordpress.org/browser/woo-jtl-connector/tags/2.4.3/vendor/jtl/connector/src/Application/Application.php#L424https://plugins.trac.wordpress.org/browser/woo-jtl-connector/tags/2.4.3/vendor/jtl/connector/src/Application/Application.php#L955#wordpress #ntbyk #JTL-ConnectorforWooCommerce#CVE_2026_87855#bot", "url": "https://infosec.exchange/users/cve/statuses/117440230162024745"}]}